Package rekall :: Package plugins :: Package response :: Module osquery

Module osquery

Author: Michael Cohen <scudette@google.com>

Classes
	OSQuery Runs the OSQuery query and emit the results.

Variables
	__author__ = `'Michael Cohen <scudette@google.com>'` The OSQuery plugin can capture the result of osquery queries and store in Rekall result collections.
	__package__ = `'rekall.plugins.response'`

Variables Details

author

The OSQuery plugin can capture the result of osquery queries and store in Rekall result collections.

Note that we do not actually process the query itself, we just relay the query to osqueryi and then write its output in a collection to be uploaded. We therefore need to have osqueryi installed somewhere on the path.

Value:

'Michael Cohen <scudette@google.com>'

Module osquery

__author__

author